config

type Base struct {
	User        string `json:"user"`
	Credentials string `json:"credentials"`
	// VaultPath is the Vault path read for the login when Credentials is
	// "vault".
	VaultPath string `json:"vault_path,omitempty"`
	// CredentialsTTL makes the console ask for the secret again (and
	// reconnect) once the connection is that old; 0 keeps it for the
	// session.
	CredentialsTTL time.Duration `json:"credentials_ttl,omitempty"`
	TLS            string        `json:"tls,omitempty"`
	TLSCA          string        `json:"tls_ca,omitempty"`
	TLSCert        string        `json:"tls_cert,omitempty"`
	TLSKey         string        `json:"tls_key,omitempty"`
	Production     bool          `json:"production"`
	SSH            *SSHProfile   `json:"ssh,omitempty"`
	// IdleTimeout ends the console session after that long without
	// activity, MaxSession after that long in all.
	IdleTimeout time.Duration `json:"idle_timeout"`
	MaxSession  time.Duration `json:"max_session"`
}

type Change struct {
	Field    string
	Old, New string
	Loosens  bool
}

type Policy interface {
	// Diff lists the changes from approved (a value of the same type) to
	// this policy, each marked Loosens or not.
	Diff(approved Policy) []Change
	// Describe is the policy as lines for the console's status screen.
	Describe() []string
}

type RawSSH struct {
	Host        string `toml:"host"`
	Port        int    `toml:"port"`
	User        string `toml:"user"`
	Auth        string `toml:"auth"`
	Key         string `toml:"key"`
	Credentials string `toml:"credentials"`
}

type SSHProfile struct {
	Host        string `json:"host"`
	Port        int    `json:"port"`
	User        string `json:"user"`
	Auth        string `json:"auth"`
	Key         string `json:"key,omitempty"`
	Credentials string `json:"credentials"`
}